Privacy Policy —
tatabat
At tatabat, your privacy matters as much as your winning streak. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and your rights as a player. We believe in full transparency — no hidden clauses, no surprises.
256-bit SSL Encryption
All data transmitted between your device and tatabat is protected by industry-standard TLS/SSL encryption at all times.
No Data Selling
tatabat never sells, rents, or trades your personal data to advertisers or unrelated third parties. Your information stays with us.
Your Data, Your Rights
You have the right to access, correct, or request deletion of your personal data held by tatabat at any time via our support team.
Transparent Cookie Use
We use cookies strictly for platform functionality, session management, and analytics. No cross-site behavioural tracking is employed.
Secure Payment Data
Payment details such as your bKash or Nagad mobile number are stored in encrypted form and used solely for transaction processing and withdrawal verification.
AML Compliance
tatabat collects identity documents as required by Anti-Money Laundering regulations. KYC data is handled with strict confidentiality.
01 Information We Collect
When you register for an account, use the tatabat platform, or interact with our support team, we collect certain personal data that is necessary for the safe, compliant, and efficient operation of our services. The categories of personal data we collect are described in detail below.
| Category | Examples of Data Collected | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National ID number, passport number | Registration & KYC verification |
| Contact Data | Email address, mobile phone number (bKash/Nagad-linked), residential address (Dhaka, Chittagong, Sylhet, etc.) | Registration & account updates |
| Financial Data | bKash number, Nagad number, Rocket number, Upay number, bank account details, deposit/withdrawal history, transaction amounts in BDT (৳) | Deposits, withdrawals, KYC |
| Technical Data | IP address, device type, operating system, browser type and version, session tokens, time zone (Bangladesh Standard Time, UTC+6) | Every platform visit |
| Usage Data | Pages visited, games played, bets placed, odds viewed, session duration, click patterns, search queries within the platform | Active sessions |
| Communications Data | Support chat transcripts, email correspondence with our team, feedback submissions | Support interactions |
| KYC Documents | Scanned copies of National ID, passport, driving licence, proof of address (utility bills, bank statements), payment method screenshots | Identity verification |
We collect personal data directly from you (for example, when you fill in the registration form or contact our support team), automatically through technical mechanisms (for example, cookies and server logs when you browse the tatabat platform), and from third-party identity verification and payment processing partners where required by our compliance obligations.
Bangladesh Players — Local Context: Because tatabat primarily serves players based in Bangladesh, the contact data we collect often includes mobile numbers linked to mobile financial services (MFS) such as bKash and Nagad. These numbers are essential for processing BDT deposits and withdrawals and are stored in compliance with our data security standards.
02 How We Use Your Data
tatabat processes your personal data only for legitimate, specified purposes and to the extent necessary to fulfil those purposes. Below is a comprehensive overview of the purposes for which we process personal data, along with the lawful basis for each:
- Account Creation & Management: We use your identity and contact data to create and maintain your tatabat player account, enable login authentication, and communicate account-related notices such as withdrawal confirmations, security alerts, and promotional opt-in communications.
- Identity Verification (KYC): We are obligated to verify the identity and age of all players as part of our responsible gaming and anti-money laundering (AML) commitments. Your identity documents and financial data are processed for this purpose. KYC checks may be carried out at registration, before a withdrawal is approved, or at any time during an ongoing compliance review.
- Processing Transactions: Your financial data (including bKash, Nagad, or bank account details) is used solely to process deposits and withdrawals in BDT. We do not store full payment card numbers; card-based transactions are handled by PCI-DSS-compliant payment processors.
- Fraud Prevention & Security: Technical data including IP addresses, device identifiers, and login timestamps are analysed to detect unusual or suspicious activity, prevent multi-accounting, and protect the integrity of the tatabat platform and its player community.
- Responsible Gaming Compliance: Usage data and account activity history are reviewed to identify players who may be exhibiting signs of problem gambling. This is part of our commitment to player welfare and our responsible gaming obligations. See our Responsible Gaming page for full details.
- Platform Personalisation & Analytics: Anonymised or aggregated usage data is used to improve the tatabat platform, optimise game recommendations, and understand how players interact with features such as the cricket betting section and slots lobby.
- Marketing Communications: Where you have opted in to receive promotional communications, we may use your email address or mobile number to notify you of bonuses, seasonal offers (such as BPL or T20 World Cup promotions), and new game launches. You may opt out of marketing communications at any time.
- Legal Obligations: We process and retain certain categories of data (including transaction records and identity documents) for as long as required by applicable laws, including anti-money laundering regulations, to comply with any legal obligations imposed on tatabat.
⚠️ No Automated Decision-Making for Account Closure: tatabat does not use fully automated decision-making processes (without human oversight) to close player accounts. Where an automated system flags suspicious activity, a member of our compliance team reviews the case before any account action is taken.
03 Data Sharing & Third Parties
tatabat does not sell your personal data. We share your data only with trusted third-party partners who are necessary to deliver our platform services, and only to the extent required for those specific purposes. All third-party partners are contractually bound to handle your data securely and in accordance with applicable data protection standards.
The categories of third parties with whom tatabat may share your personal data are as follows:
- Payment Processing Partners: Your financial data is shared with the payment providers you choose to use — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard — strictly for the purpose of processing your deposit or withdrawal transaction. These providers operate under their own privacy policies and regulatory frameworks.
- Identity Verification Services: To fulfil our KYC obligations, we may share identity document data with third-party age and identity verification technology providers. These providers process your data solely for verification purposes and are prohibited from using it for any other purpose.
- Game Software Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Hacksaw Gaming, and Ezugi may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver the game experience. These providers do not receive your full name, NID number, or payment details.
- Customer Support Tools: Our support team uses helpdesk software to manage player enquiries. Support interactions, including communications sent to support@tatabat, are stored within these tools in encrypted form.
- Analytics Providers: Aggregated, anonymised usage data may be processed by analytics platforms to help tatabat understand platform performance. No personally identifiable data is shared with analytics providers.
- Legal and Regulatory Authorities: tatabat will disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required to do so by applicable law or in response to a valid legal order. We will notify affected players of such disclosures where legally permitted to do so.
No Cross-Border Data Transfers Without Safeguards: Where personal data is processed by a third-party partner located outside Bangladesh, tatabat ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that required under applicable Bangladeshi data protection principles.
05 Data Security & Storage
tatabat takes the security of your personal data seriously. We implement a layered set of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Transport Layer Security (TLS/SSL): All data transmitted between your device and the tatabat platform is encrypted in transit using 256-bit SSL/TLS encryption. The padlock icon in your browser address bar confirms that your connection is secure.
- At-Rest Encryption: Sensitive data stored in our databases — including identity documents, KYC records, and payment method details — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
- Access Controls: Access to personal data within tatabat's internal systems is restricted on a strict need-to-know basis. Staff who handle player data undergo background checks and are trained on data handling obligations. Access is logged and audited regularly.
- Password Security: Player account passwords are stored as salted cryptographic hashes. tatabat staff cannot retrieve your plain-text password — only you know it. If you forget your password, a secure reset process is provided.
- Intrusion Detection: Our platform infrastructure is monitored 24/7 by automated intrusion detection and anomaly alerting systems. Any detected unauthorised access attempt triggers an immediate security response protocol.
- Data Minimisation: tatabat collects only the personal data that is strictly necessary for the stated purpose. We do not collect data speculatively or retain it beyond the period required.
⚠️ Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tatabat will notify affected players without undue delay. Notification will be sent to the email address registered on your account. We will include a description of the nature of the breach, the data affected, the likely consequences, and the steps tatabat is taking to address it.
While tatabat employs robust security measures, no online platform can guarantee absolute security. You are also responsible for protecting your own account credentials. We strongly recommend enabling two-factor authentication (2FA) where available, using a strong unique password for your tatabat account, and never sharing your login details with any third party.
06 Your Rights as a Player
As a player on tatabat, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at support@tatabat (plain text — not a clickable link). We will respond to all valid requests within 30 days of receipt.
- Right of Access: You have the right to request a copy of the personal data tatabat holds about you, including the categories of data collected, the purposes for which it is processed, and how long it will be retained. We will provide this information in a clear, structured format.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic account information (such as your email address or phone number) directly through your account settings, or by contacting our support team for more complex corrections.
- Right to Erasure: You may request that tatabat delete your personal data, subject to certain conditions. We are unable to fulfil erasure requests where we are legally required to retain data — for example, transaction records required for AML compliance. Where full erasure is not possible, we will erase all data that is not subject to a legal retention obligation.
- Right to Restriction of Processing: You may request that tatabat restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
- Right to Data Portability: Where technically feasible and legally applicable, you may request a structured, machine-readable export of the personal data you have provided to tatabat.
- Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, tatabat will cease processing your data for that purpose immediately. You may also object to processing based on legitimate interests, though tatabat may be entitled to continue processing where there are compelling legitimate grounds.
- Right to Withdraw Consent: Where processing is based on your consent (for example, opt-in marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Identity Verification for Rights Requests: To protect your data, tatabat requires all rights requests to be verified before we action them. We may ask you to confirm your account details or provide a copy of an identity document before disclosing or erasing data. This verification step is a security measure to ensure that data is not disclosed or deleted as a result of an unauthorised request.
07 Data Retention Policy
tatabat retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods applicable to the main categories of personal data we hold are set out below:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML compliance, legal obligations, dispute resolution |
| Transaction Records | 7 years from transaction date | Financial record-keeping, AML audit trail |
| KYC Documents | Duration of account + 5 years after closure | Regulatory compliance, identity verification audit |
| Support Communications | 3 years from last interaction | Dispute resolution, service quality review |
| Technical / Log Data | 90 days (security logs: 12 months) | Fraud detection, platform performance monitoring |
| Marketing Preferences | Until consent is withdrawn or account is closed | Consent management, marketing compliance |
| Cookie / Analytics Data | 90 days (anonymised aggregates: indefinite) | Platform analytics and improvement |
When the applicable retention period expires, tatabat will securely delete or anonymise the personal data in question. Deletion is carried out using industry-standard secure erasure methods. Where complete deletion is not immediately technically feasible (for example, where data is stored in encrypted backup archives), the data will be isolated from active processing and deleted at the next scheduled archive purge cycle.
Players who voluntarily close their tatabat account should be aware that their personal data will not be deleted immediately upon account closure. Data that is subject to a legal retention obligation (such as transaction records and KYC documents) will be retained for the periods specified in the table above, after which it will be securely deleted.
08 Contact & Data Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data tatabat holds about you, please contact our dedicated privacy support team. We are committed to addressing all privacy-related enquiries promptly and transparently.
Privacy Support Email:
support@tatabat
(plain text — not a clickable link)
Our support team is available 24 hours a day, 7 days a week, including all Bangladesh public holidays such as Victory Day (December 16), Independence Day (March 26), and Eid. Response times for privacy-related requests are typically within 2 business days for general queries and within 30 days for formal rights requests requiring account investigation.
Updates to This Privacy Policy: tatabat reserves the right to update this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this page will be revised and, where appropriate, players will be notified via the registered email address on their account. We encourage you to review this Privacy Policy periodically. Continued use of tatabat following any update constitutes acceptance of the revised policy.
This Privacy Policy is written in English and governs the data practices of tatabat in relation to players accessing the platform from Bangladesh and other jurisdictions. In the event of any translation of this policy being made available for reference purposes, the English version shall prevail in the event of any inconsistency.
Your Privacy Is Safe at tatabat
Now that you understand how we protect your data, explore everything tatabat has to offer — from live cricket betting and BPL markets to 500+ slots and instant BDT payouts. 18+ only. Play responsibly.